Self‑reporting vs Internal Investigation in Romania (2026): Should You Notify Prosecutors or Run an Internal Probe First?

When a Romanian company discovers suspected fraud, bribery, or an accounting irregularity, its leadership faces an immediate fork in the road: self‑report to prosecutors now, or run a documented internal investigation first and decide on disclosure later. The choice between self‑reporting vs internal investigation in Romania carries consequences that range from reduced criminal sanctions to accelerated asset freezes, and the 2026 EU Anti‑Corruption Directive guidance has materially shifted the calculus. This article delivers a practical, dimension‑by‑dimension decision framework for general counsel, compliance officers, and CFOs operating in or through Romania, so you can pick the right path within the first 48 hours of a suspected incident.

An internal investigation is a company‑initiated fact‑finding exercise, typically led by external criminal counsel and forensic specialists, designed to establish what happened, preserve evidence, and inform the decision on whether to report externally. Self‑reporting means voluntarily disclosing the suspected offence to Romanian prosecutors (the public prosecutor’s office, the National Anticorruption Directorate (DNA), or a specialised unit) before authorities discover it independently. Neither path is inherently superior. The right choice depends on the severity of the suspected conduct, the quality of evidence available, your company’s regulatory obligations, and how quickly you can mobilise experienced criminal counsel.

Option A, Self‑Reporting to Prosecutors in Romania

Self‑reporting means a company or its representative voluntarily files a criminal complaint or provides information to Romanian prosecutors, most commonly the competent public prosecutor’s office or, for corruption offences, the DNA. The disclosure can be made in writing or through official channels, and it triggers the prosecutor’s duty to assess whether a formal criminal investigation (urmărire penală) should be opened under the Romanian Code of Criminal Procedure.

How the process works in practice

The company’s counsel prepares a structured disclosure letter identifying the suspected offence, the relevant facts, and the evidence already gathered. This is filed with the competent prosecutor. Once received, the prosecutor evaluates the complaint and, if the legal threshold is met, opens a criminal file. From that point, the prosecutor controls the investigation: the company may be asked to produce documents, grant access to IT systems, and make employees available for interviews.

Advantages of self‑reporting

• Mitigation credit. Under Romanian criminal law, voluntary cooperation and disclosure before the authorities discover the wrongdoing can be treated as a mitigating circumstance. Industry observers expect this benefit to strengthen further as Romania transposes the EU Anti‑Corruption Directive, which codifies internal investigations and cooperation as formal mitigating factors.
• Speed of resolution. Cases where the company cooperates fully tend to proceed faster, with lower overall uncertainty about outcomes.
• Reputational narrative. A voluntary report signals good governance, useful for shareholders, regulators, and business partners who may learn of the issue later.

Disadvantages of self‑reporting

• Loss of control. Once prosecutors are involved, the company cannot steer the investigation’s scope, timing, or public visibility.
• Immediate exposure. Prosecutors may seek interim measures, asset freezes, travel bans, or seizure of documents, that disrupt business operations.
• No formal immunity. Romanian law does not offer a blanket self‑reporting immunity or a structured deferred‑prosecution programme comparable to those in the United States or the United Kingdom. Cooperation is weighed as mitigation, not as a guarantee of non‑prosecution.
• Premature disclosure risk. Reporting before the facts are clear may lead the company to over‑disclose, complicate employee relations, or inadvertently implicate innocent personnel.

Option B, Running an Internal Investigation First

An internal investigation is a structured, company‑controlled fact‑finding process. When run correctly, under the direction of external criminal counsel, it allows the organisation to determine whether an offence occurred, identify responsible individuals, preserve evidence to forensic standards, and build a documented mitigation file before making any external disclosure.

The internal investigation process map

• Intake and triage (hours 0–24). Receive the allegation (whistleblower report, audit finding, or management suspicion). Assess severity: does this involve potential criminal liability? Retain external criminal counsel immediately if criminal exposure is plausible.
• Evidence preservation (hours 1–72). Issue a litigation hold. Forensically image relevant servers, email accounts, and devices. Secure physical documents. Under no circumstances allow the subjects of the investigation to delete data or remove files.
• Witness interviews (weeks 1–4). Conduct structured interviews with key witnesses and subjects. Document each interview with detailed notes. Counsel should lead or attend all interviews involving individuals with potential criminal exposure.
• Forensic analysis (weeks 2–6). Engage forensic accountants or IT specialists to analyse financial transactions, communications, and data patterns.
• Legal analysis and decision (weeks 4–8). Synthesise findings. Determine whether the evidence supports a criminal referral, internal disciplinary action, or remediation without external disclosure.

Who should run it

The investigation should be led by external criminal counsel, not in‑house legal alone. This structure maximises the likelihood that attorney–client communications remain privileged, provides independence from management that may be implicated, and ensures the evidence meets standards that prosecutors will recognise if the company later self‑reports. Forensic IT vendors and forensic accountants should be retained through counsel’s engagement letter where possible.

Where internal investigations go wrong

A mishandled internal probe can increase exposure rather than reduce it. The most common pitfalls in Romanian practice include: conducting employee interviews without proper notice or GDPR‑compliant processing; failing to preserve the chain of custody for digital evidence; using surveillance methods that violate Law No. 190/2018 (Romania’s GDPR supplementary legislation); and allowing the investigated subjects to participate in the evidence‑collection process. Each of these errors can render evidence inadmissible and, worse, expose the company to additional liability for data‑protection violations or employee‑rights breaches under the Romanian Labour Code (Law No. 53/2003).

Self‑Reporting vs Internal Investigation in Romania, Side‑by‑Side Comparison

Three key takeaways from this comparison:

• Self‑reporting is faster but surrenders control. It is the right move when the offence is clear and an AML or mandatory reporting obligation applies.
• An internal investigation buys time, builds a mitigation file, and may resolve the matter without prosecution, but only if it is run by experienced criminal counsel with forensic‑grade evidence handling.
• The 2026 EU guidance materially rewards the “investigate first, report with evidence” approach, provided the probe is prompt, documented, and genuinely remedial.

Dimension‑by‑Dimension Analysis

Eligibility and statutory triggers

Romanian prosecutors typically expect self‑reporting in cases involving serious economic crime, particularly bribery of public officials (falling under the DNA’s jurisdiction), large‑scale AML violations where the Office for Prevention and Combating Money Laundering (ONPCSB) reporting threshold is triggered, and tax fraud involving significant sums. For cases involving ambiguous facts, internal policy breaches, or commercial disputes with possible criminal overtones, internal investigation first is common practice across CEE jurisdictions. Wolf Theiss notes that self‑reporting or cooperation with prosecuting authorities can be considered as mitigating circumstances in Romania and neighbouring jurisdictions.

Evidence preservation and admissibility

Evidence collected during an internal investigation can be used in subsequent criminal proceedings, but only if it meets basic admissibility standards. Practical rules for the first 72 hours:

• Issue a written litigation hold to all custodians within hours of the allegation.
• Forensically image (bit‑for‑bit copy) relevant servers, laptops, and mobile devices, never work on originals.
• Log all email‑account accesses and document the chain of custody for every piece of evidence.
• Do not interview the primary suspect without external counsel present; notes should be prepared immediately and stored securely.

Privilege, confidentiality, and legal risk

Romania recognises attorney–client privilege for communications between a lawyer and client made in the context of providing legal advice or representation. However, privilege does not extend to the underlying facts of the investigation (e.g., business documents, financial records). Employee witness statements taken during an internal probe are generally not privileged. Structuring the investigation under external criminal counsel, and routing forensic vendor engagements through counsel, maximises the scope of protected work product. Once a self‑report is filed, any documents shared with prosecutors lose their privileged status.

Data protection and whistleblowing (GDPR / Law 190/2018)

Internal investigations in Romania must comply with the GDPR and Law No. 190/2018, Romania’s supplementary data‑protection legislation. Iorgulescu Legal’s 2026 guide emphasises that employers must identify a lawful basis for processing employee personal data during a probe, typically legitimate interest (Art. 6(1)(f) GDPR) or legal obligation (Art. 6(1)(c)). Employee monitoring tools, email searches, and CCTV review require a data‑protection impact assessment (DPIA) and transparent notice unless a narrow exception for crime prevention applies. Romania’s transposition of the EU Whistleblowing Directive (Law No. 361/2022) also mandates that companies with 50+ employees maintain internal reporting channels and protect whistleblowers from retaliation. AmCham Romania’s practical guidance stresses that whistleblower reports received through these channels must be handled confidentially and investigated within prescribed timelines.

Cost, fines, and financial exposure

Note: Specific fee ranges depend on case complexity, the number of jurisdictions involved, and whether the matter reaches trial. Experienced Romanian criminal counsel can provide tailored estimates during the initial retention consultation.

Timing, enforceability, and practical outcomes

A well‑resourced internal investigation typically takes two to eight weeks. Prosecutor response times after a self‑report are variable, a formal criminal file can be opened within days, but the full investigation may take months or years. The critical point: retaining criminal counsel within 24–48 hours ensures that whichever path is chosen, evidence is preserved and the company’s position is protected from the outset.

What Changes in 2026, The EU Anti‑Corruption Directive and Its Impact on the Self‑Reporting vs Internal Investigation Decision in Romania

The most significant development reshaping the self‑reporting vs internal investigation Romania decision in 2026 is the new EU Anti‑Corruption Directive and surrounding guidance. As reported by Lawyersweek in May 2026, internal investigations are no longer treated as a mere damage‑control reflex. They are now a codified mitigating factor, a defence asset that, when properly executed, can materially reduce sanctions or narrow the scope of prosecution.

The practical consequence is substantial. Under the evolving framework, EU Member States, including Romania during the transposition period, are expected to treat a prompt, professionally documented internal investigation as formal evidence of the company’s good‑faith effort to identify and remediate wrongdoing. Early indications suggest that prosecutors across CEE, including Romania, are already incorporating this guidance into their assessment of corporate cooperation. The likely practical effect will be that companies which present prosecutors with a credible internal investigation report, conducted under counsel and meeting forensic evidence standards, will receive more favourable treatment than those that either report without investigation or delay reporting without documented justification.

The actionable takeaway for Romanian companies is clear: for mid‑severity cases where the facts are not yet established, the optimal strategy is now a short, counsel‑led internal probe (two to six weeks) to gather mitigation evidence, followed by a structured self‑report with that substantiation. This “investigate then report” sequence only works, however, when the investigation is genuinely prompt, evidence is preserved from day one, and the process is documented to standards that prosecutors will accept. The whistleblowing directive 2026 framework further reinforces this approach by requiring companies to investigate whistleblower complaints through documented internal channels before external escalation.

When to Self‑Report vs When to Run an Internal Investigation, Decision Framework

Choose self‑reporting (Option A) when:

• Evidence clearly indicates a prosecutable offence and immediate prosecutor cooperation is likely to reduce sanctions.
• A regulatory reporting obligation applies, for example, an AML threshold is triggered or a public official is involved.
• You already have criminal counsel retained and can make an immediate, full disclosure accompanied by a remediation plan.

Choose internal investigation first (Option B) when:

• Facts are unclear and evidence needs professional collection before you can determine whether an offence occurred.
• The risk is primarily reputational and internal remediation, disciplinary action, policy reform, clawbacks, may cure the problem without prosecution.
• You can immediately preserve evidence, retain criminal counsel to run the probe, and document every step for later mitigation credit.

Worked example: A multinational’s Romanian subsidiary receives a whistleblower report alleging that a mid‑level procurement manager accepted kickbacks from a local supplier. The amounts are unclear, and the evidence is a single email thread. The right move: retain criminal counsel immediately, issue a litigation hold, forensically image the manager’s devices, and run a focused internal investigation over three to four weeks. If the probe confirms bribery, counsel prepares a structured self‑report to the DNA with the investigation file as mitigation evidence. If the probe finds a policy violation but no criminal conduct, the company disciplines the employee and remediates internally, no external report needed.

When to Hire a Criminal Lawyer for This Decision in Romania

The single most costly mistake a company can make is delaying counsel retention. Whether the eventual path is self‑reporting or an internal investigation, experienced criminal counsel should be involved from the earliest hours. Concrete hire triggers:

• Within 24–48 hours of any allegation involving potential criminal exposure, fraud, bribery, serious AML suspicion, tax evasion, or embezzlement.
• Before any employee interviews or forensic imaging are conducted. Interviews done without counsel present risk privilege waiver and procedural errors that can undermine the entire investigation.
• Before any disclosure to prosecutors. A self‑report must be strategically drafted to maximise mitigation credit and minimise unintended admissions. Counsel structures the disclosure, negotiates the scope of cooperation, and manages the company’s exposure throughout.
• When a whistleblower complaint is received that alleges criminal conduct, even if the allegation seems minor. Early legal triage prevents escalation.
• When a regulator or prosecutor contacts the company about an investigation that may relate to the company’s operations, even informally.

An experienced criminal lawyer in Romania provides: counsel‑led evidence preservation, privilege strategy, interface with prosecutors and the DNA, drafting of self‑reporting letters, negotiation of mitigation terms, coordination of forensic vendors, and, if charges are filed, trial representation. For cross‑border matters, counsel also coordinates with foreign law firms and manages multi‑jurisdictional privilege issues. Companies seeking specialised criminal defence counsel in Romania should prioritise practitioners with documented experience in corporate investigations and prosecutor cooperation.

Sources

1. Lawyersweek, From mitigating factor to strategic asset: How the New EU Anti‑Corruption Directive Reframes Internal Investigations
2. Iorgulescu Legal, Data Protection in Internal Investigations in Romania
3. Wolf Theiss, Corporate Investigations in CEE & SEE
4. Schoenherr, Internal Investigations Guide
5. AmCham Romania, Whistleblowing Guidelines
6. ANABI / Ministry of Justice, Enhancing the Investigation Capacities of the Romanian Authorities
7. Kinstellar, From Allegation to Accountability: Why Investigations Matter in Romania
8. Lexology, Company Conduct During Criminal and Regulatory Investigations (Romania)
9. WODC, Corporate Self‑Investigations and Self‑Reporting